The pandemic and the world’s large shift to doing (even) extra on-line has put an unprecedented quantity of strain on cybersecurity. Now, it appears to be like like one of many large public gamers in that area, Palo Alto Networks, has made an acquisition that may assist it handle that problem, particularly with safety instruments designed for these working in DevOps to deal with huge volumes of safety information extra effectively.
In line with our sources and reviews, the corporate is buying Bridgecrew, a startup out of Israel that automates the method of community monitoring and safety remediation by translating the suggestions into code. Its instruments are utilized by fast-scaling, internet-based companies like Robinhood, BetterHelp and OneMain Monetary.
The acquisition was first rumored earlier this month in Israeli press as a deal price greater than $100 million. Two sources confirmed the talks to us on the time however stated the deal had not but been closed. Then, a report this morning in Israel’s Calcalist stated the acquisition is now valued at round $200 million, presumably extra should you rely earn-outs.
Sources near the startup’s traders affirm to us that the papers have certainly now been signed on the deal, so count on an official announcement quickly.
Spokespeople for each firms beforehand declined to touch upon any deal once we requested earlier this month. We’re reaching out to each once more.
A $200 million price ticket would characterize a powerful return for Bridgecrew and its traders.
The startup, backed by the likes of Battery Ventures, Operator Companions and more than a dozen others, has solely raised round $18 million, together with a Series A of $14 million last year. In line with PitchBook data, Bridgecrew had a valuation of about $40 million on the time of that final spherical.
Cybersecurity — particularly the necessity for higher and extra subtle options within the face of an rising quantity of breaches in an ever-growing risk panorama — has seen an rising focus for years. Certainly, it’s one of many rising tides that has lifted Palo Alto Networks’ boat.
However within the final 12 months, the Covid-19 pandemic has introduced extra consideration to cybersecurity and the necessity for extra automation in it than ever earlier than.
The reason being pretty apparent however is price repeating: as extra organizations migrate operations into distributed, digital-only, cloud-based environments, architectures have turn into extra fragmented, advanced and easily greater and extra of an exploitation goal.
That’s offered a problem for these provisioning safety for these operations, and that has led to a brand new wave of firms over the last several years constructing automated options, merging DevOps with safety monitoring.
“We based Bridgecrew as a result of we noticed that there was an enormous bottleneck in safety engineering, in DevSecOps, and the way engineers have been working cloud infrastructure safety,” Bridgecrew CEO and co-founder Idan Tendler informed TechCrunch final 12 months. Others on this wider area embrace PortShift (which was acquired by Cisco last year), Tines and plenty of others.
Palo Alto Networks has additionally been constructing its personal instruments for DevOps safety, specifically with Prisma, which it launched in 2019 and updated last year.
It’s not clear why Palo Alto would select to complement that with an outdoor acquisition, but it surely’s notable that Bridgecrew focuses on DevOps safety particularly and it has seen plenty of traction in that space.
Its candy spot seems to be prospects who’re constructing big companies themselves on cloud infrastructure and are utilizing automation as a part of greater efforts to make sure higher cybersecurity practices.
It counts prospects like Databricks for its flagship Bridgecrew platform product, which gives safety scanning and remediation within the type of code throughout a variety of infrastructure environments. The corporate recently said that its buyer base and month-to-month signal ups each tripled within the second half of final 12 months.
It has additionally seen plenty of pick-up of Checkov, its open supply infrastrcuture-as-code (IaC) scanner that it says works throughout cloud infrastructure in Terraform, Cloudformation, Kubernetes, Arm templates or Serverless Framework to detect misconfigurations.
Checkov handed a milestone of 1 million downloads final quarter, talking to the corporate’s status and traction with the very prospects that Palo Alto is trying to attain.
Notably, Bridgecrew says it’s engaged on different open supply tasks, so that might additionally be a magnet for Palo Alto right here.
One other takeaway from this information is how Israel continues to be fertile floor for hatching and rising cybersecurity companies.
“Palo Alto Networks was established by Israeli founders, and Bridgecrew would be the seventh Israeli cybersecurity firm acquired by Palo Alto within the latest years,” stated Avihai Michaeli, a Tel Aviv-based senior funding banker and startup advisor.
We are going to replace this story as we study extra.